144 matches found
external_v8_AOSP10_r33_CVE-2021-0393
V8 JavaScriptエンジン V8はGoogleのオープンソースJavaScriptエンジンです。 V8はECMA-262で規定されたECMAScriptを実装しています。 V8はC++で書かれており、GoogleのオープンソースブラウザであるGoogle Chromeで使用されています。 V8はスタンドアロンで実行することも、任意のC++アプリケーションに組み込むこともできます。 V8 Project page: https://github.com/v8/v8/wiki コードの入手 depot tools をチェックアウトし、次のコマンドを実行します。...
external_v8_AOSP10_r33_CVE-2021-0396
V8 자바스크립트 엔진 ============= V8은 Google의 오픈소스 자바스크립트 엔진입니다. V8은 ECMA-262에 명시된 ECMAScript를 구현합니다. V8은 C++로 작성되었으며 Google의 오픈소스 브라우저인 Google Chrome에서 사용됩니다. V8은 독립적으로 실행되거나 모든 C++ 애플리케이션에 내장될 수 있습니다. V8 프로젝트 페이지: https://github.com/v8/v8/wiki 코드 가져오기 depot tools를 체크아웃하고 다음을 실행하세요: root@kitploit: fetc...
CVE-2024-4761
CVE-2024-4761 高 CVE-2024-4761 エクスプロイト Googleは、Chromeブラウザにおいて、CVE-2024-4761として追跡される高深刻度のゼロデイ脆弱性脆弱性に対処するため、緊急セキュリティアップデートを公開しました。 この脆弱性は、GoogleウェブブラウザのV8 JavaScriptエンジンに存在する範囲外書き込みの問題です。 CVE-2024-4761 はパッチ適用されました...
POC-CVE-2025-6554
CVE-2025-6554 CVE-2025-6554 는 Chrome의 V8 JavaScript 엔진 인터프리터에서 발생하는 취약점입니다 Hole Check '옵셔널 체이닝이 포함된 표현식 내 의도하지 않은 변수에 대한 부적절한 제어. POC CVE-2025-6554-POC.JS는 변수 사용 전 "Hole" 검증 메커니즘의 결함을 탐구하여, 일반적으로 참조 오류에 의해 차단되는 초기화되지 않은 값 읽기 동작을 허용합니다. root@kitploit: function leakhole let x; delete x?.y?.a; retur...
CVE-2021-21220
CVE-2021-21220の悪用 誤ったJIT動作からリモートコード実行へ 概要 このプレゼンテーションでは、最適化中の誤ったJITコンパイラの仮定によって引き起こされたGoogle ChromeのV8 JavaScriptエンジン の脆弱性CVE-2021-21220 の悪用について説明します。 プレゼンテーションでは次の項目を順に説明します： V8がJust-In-Time JITコンパイルを実行する方法 最適化中に符号付き/符号なし型混同バグが現れる仕組み そのバグが範囲外（OOB）配列プリミティブにつながる仕組み...
CVE-2026-91728
A flaw was found in V8, the JavaScript engine used in Google Chrome. An integer overflow vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...
CVE-2026-85046
A flaw was found in V8, the JavaScript engine in Google Chrome. This type confusion vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a compromise of the user's system...
CVE-2026-82072
An out of bounds read flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=534416978 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...
CVE-2026-78938
A flaw was found in the V8 JavaScript engine used in Chromium-based browsers. This type confusion vulnerability allows a remote attacker to execute unauthorized code within the browser's security sandbox by tricking a user into visiting a specially crafted web page. This could lead to a compromis...
CVE-2026-78901
A flaw was found in the V8 JavaScript engine. A race condition vulnerability allows a remote attacker to execute arbitrary code within the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...
CVE-2026-76020
A race condition flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=541837151...
CVE-2026-19149 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19168 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-62776
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:35+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:16:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:32+00:00| seen|...
PT-2026-47471
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.103 Description An out-of-bounds read and write issue exists in V8, the JavaScript and WebAssembly engine used by Google Chrome. This flaw allows a remote attacker to execute arbitrary code within the...
ROS-20260310-73-0007
A vulnerability in the V8 JavaScript script handler of Google Chrome browser is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code and cause a denial of service via a specially crafted HTML page...
ROS-20260310-73-0010
A vulnerability in the V8 JavaScript script handler of Google Chrome browser is related to errors in the implementation of security checks for standard elements. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to read and delete data using a specially...
CVE-2022-23731
V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...
